Hari ini komuniti Joomla! telah mengumumkan Joomla! siri 1.5.6 (Vusani) telah sedia untuk dipindahturun. Versi ini adalah untuk menangani isu keselamatan tahap tinggi di mana terdapat masalah di dalam fungsi untuk mengingati kata laluan dan disarankan agar semua pengguna Joomla! upgrade Joomla! masing-masing dengan segera.Masalah di dalam versi sebelum ini dilaporkan:

A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user (lowest id). Typically, this is an administrator user. Note, that changing the first users username may lessen the impact of this exploit (since the person who changed the password does not know the login associated with the new password). However, the only way to completely rectify the issue is to upgrade to 1.5.6 (or patch the /components/com_user/models/reset.php file).
For more information about this exploit, visit the Joomla Security Blog http://developer.joomla.org/security.html.

Now I think I will focus my skill on Joomla 1.5 MVC. There is a lot job opportunity out there for me. Since now I develop & publishing my clients site base on joomla core framework. I think it would be great if I know what I’m Doing.

So here is the use full link I found on the if you want to know how to develop MVC application based joomla 1.5.

• Updating Hello.php as COmponent
• Component Dev Parti
• Fast Road to Understand COmponent Programming

Hopefully I can build my own custom components, models and plugins.